Glenn,
This serves as a response both to today's messages to the CSS list and
also your recent comments to the W3C Font list regarding same origin
related text in the WOFF spec.
I wonder if you have had an opportunity to look at Anne van Kesteren's
proposal for a generic 'From-Origin' header, which would provide a
standard mechanism for authors to set same origin restrictions or
permissions for all resource types and, hence, would remove the need for
@font-face specific SOR.*
See http://annevankesteren.nl/2011/02/from-origin
Would such a mechanism be satisfactory to you?
JH
*The background of SOR in @font-face and WOFF is a desire to make it
easy and reliable for webfont licensees to conform to license terms that
require same origin restriction. There is support for Anne's
From-Origin mechanism in the W3C Webfonts WG, which is why the current
SOR text in the WOFF spec is marked as being 'at risk'. The WG voted not
to remove the current text, though, until a viable alternative mechanism
is available, recognising that a lot of support for WOFF from the
commercial font foundries is dependent on the modicum of IP security
provided by the format as currently specified.